Runtime error in pe.hexpat

WerWolv / ImHex-Patterns

Hex patterns, include patterns and magic files for the use with the ImHex Hex Editor

https://github.com/WerWolv/ImHex

GNU General Public License v2.0

640 stars 168 forks source link

Runtime error in pe.hexpat #254

Open colejohnson66 opened 3 months ago

colejohnson66 commented 3 months ago

Opening Microsoft Excel 16.0.17531.20140 (EXCEL.EXE; SHA256 hash 127dd158ed175bb0f34b10bcf1d52d0786eae50f304b9cc168c4d0a159f8076a) in ImHex prompts me to use pe.hexpat. All good so far.

However, during execution of the pattern, a runtime error occurs:

E: runtime error: Cannot place variable 'name' at out of bounds address 0xFFFFFFFFFFFEC201
E:   -->   in <Source Code>:428:69
E: 428 |  relativeVirtualDifference();
E:                                   ^
I: Evaluation took 0.0910719s

sisco0 commented 3 months ago

Could you kindly share the file that causes this inconvenience? An analysis could be run after replicating the inconvenience locally @colejohnson66 .

colejohnson66 commented 3 months ago

Here's 16.0.17628.20110 (SHA256 450c907b8137ae61cf89ee65dc93c9e4f3cd4680082c51c41fe5d03f9be91408)

EXCEL.zip